Vulnerability Management and Prioritization
In a hypothetical incident, teams fix critical findings while an exploited medium-severity flaw waits. The missing inputs are exposure and impact.
-
-
CVSS (Common Vulnerability Scoring System)
The base score describes technical severity. Public threat intelligence and local exposure, controls, and impact inform its use in risk assessment.